CVE-2024-11096

A vulnerability, which was classified as critical, was found in code-projects Task Manager 1.0. This affects an unknown part of the file /newProject.php. The manipulation of the argument projectName leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.
CVSS

No CVSS.

Configurations

No configuration.

History

12 Nov 2024, 01:15

Type Values Removed Values Added
New CVE

Information

Published : 2024-11-12 01:15

Updated : 2024-11-12 13:55


NVD link : CVE-2024-11096

Mitre link : CVE-2024-11096


JSON object : View

Products Affected

No product.

CWE
CWE-74

Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')

CWE-89

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')